rnxsim 0.1.516 → 0.1.518

package/detox/index.ts

@@ -1772,8 +1772,15 @@ export const device = {
       // once durationMs of lockstep time has elapsed, so held states (a lifted
       // control thumb, a pressed row) are painted mid-hold. an external trigger
       // that holds and releases before returning never paints a frame in
-      // between, because no lockstep frame steps while it runs.
-      hold?: { durationMs: number; x: number; y: number } | null
+      // between, because no lockstep frame steps while it runs. moves drag the
+      // held pointer to each point once afterMs of lockstep time has elapsed
+      // since the press, and the release lands at the last point reached.
+      hold?: {
+        durationMs: number
+        moves?: Array<{ afterMs: number; x: number; y: number }>
+        x: number
+        y: number
+      } | null
       rootFrame?: { height: number; width: number; x: number; y: number } | null
       settleMs?: number
       trigger?: () => unknown
@@ -1851,6 +1858,7 @@ export const device = {
             bridges?: {
               interact?: {
                 touchDown: (x: number, y: number) => Promise<boolean>
+                touchMove: (x: number, y: number) => Promise<boolean>
                 touchUp: (x: number, y: number) => Promise<boolean>
               }
               liveComposite?: {
@@ -1982,23 +1990,45 @@ export const device = {
         const frameMs = 1000 / 60
         const controller = await lockstep.begin(60)
         // the hold's pointer goes down before the first stepped frame, so its
-        // start is one frame before the first receipt; the release lands on the
-        // first stepped frame at or past durationMs from there. the deadline is
-        // a frame index: comparing summed virtual timestamps against the
-        // duration lets rounding push the release past the frame it belongs to.
-        const holdState: { released: boolean; releaseFrameIndex: number | null } = {
+        // start is one frame before the first receipt; each move and the release
+        // land on the first stepped frame at or past their time from there. the
+        // deadlines are frame indexes: comparing summed virtual timestamps
+        // against a duration lets rounding push an event past its frame.
+        const moves = input.hold?.moves ?? []
+        const holdState = {
+          nextMove: 0,
+          pressFrameIndex: null as number | null,
           released: false,
-          releaseFrameIndex: null,
+          x: input.hold?.x ?? 0,
+          y: input.hold?.y ?? 0,
         }
-        const releaseHoldIfDue = async (receipt: FrameReceipt) => {
+        const holdEventFrameIndex = (afterMs: number) =>
+          (holdState.pressFrameIndex ?? 0) + Math.ceil(afterMs / frameMs)
+        const nextHoldEventFrameIndex = () => {
+          if (!input.hold || holdState.released || holdState.pressFrameIndex === null) {
+            return null
+          }
+          const move = moves[holdState.nextMove]
+          return holdEventFrameIndex(move ? move.afterMs : input.hold.durationMs)
+        }
+        const advanceHold = async (receipt: FrameReceipt) => {
           if (!input.hold || !interact || holdState.released) return
-          if (holdState.releaseFrameIndex === null) {
-            holdState.releaseFrameIndex =
-              receipt.frameIndex - 1 + Math.ceil(input.hold.durationMs / frameMs)
+          if (holdState.pressFrameIndex === null) {
+            holdState.pressFrameIndex = receipt.frameIndex - 1
+          }
+          for (
+            let move = moves[holdState.nextMove];
+            move && receipt.frameIndex >= holdEventFrameIndex(move.afterMs);
+            move = moves[holdState.nextMove]
+          ) {
+            holdState.nextMove++
+            holdState.x = move.x
+            holdState.y = move.y
+            await interact.touchMove(move.x, move.y)
           }
-          if (receipt.frameIndex < holdState.releaseFrameIndex) return
+          if (receipt.frameIndex < holdEventFrameIndex(input.hold.durationMs)) return
           holdState.released = true
-          await interact.touchUp(input.hold.x, input.hold.y)
+          await interact.touchUp(holdState.x, holdState.y)
         }
         try {
           const baselineBitmap = await captureBitmap()
@@ -2023,7 +2053,7 @@ export const device = {
           for (let frame = 0; frame < detectionFrameLimit; frame++) {
             if (state.cancelled) throw new Error('rnx motion capture was cancelled')
             const receipt = await controller.stepFrame()
-            await releaseHoldIfDue(receipt)
+            await advanceHold(receipt)
             const candidateBitmap = await captureBitmap()
             const bounds = boundsFor(candidateBitmap)
             const measurement = measureChange({
@@ -2050,25 +2080,20 @@ export const device = {
           const snapshots: Snapshot[] = []
           for (const stage of input.stages) {
             if (state.cancelled) throw new Error('rnx motion capture was cancelled')
-            if (
-              input.hold &&
-              !holdState.released &&
-              holdState.releaseFrameIndex !== null
+            // step through every hold move and the release that fall before
+            // this stage one frame at a time, so the stage paints the pointer
+            // where it belongs rather than a hold the jump skipped past.
+            const stageFrameIndex =
+              visibleStart.frameIndex + Math.ceil(stage.offsetMs / frameMs)
+            for (
+              let eventFrameIndex = nextHoldEventFrameIndex();
+              eventFrameIndex !== null && stageFrameIndex > eventFrameIndex;
+              eventFrameIndex = nextHoldEventFrameIndex()
             ) {
-              // step to the release frame first when this stage lies past it,
-              // so the stage paints the released state rather than a hold
-              // that overran because the jump skipped its deadline.
-              const stageFrameIndex =
-                visibleStart.frameIndex + Math.ceil(stage.offsetMs / frameMs)
-              while (
-                !holdState.released &&
-                stageFrameIndex > holdState.releaseFrameIndex
-              ) {
-                await releaseHoldIfDue(await controller.stepFrame())
-              }
+              await advanceHold(await controller.stepFrame())
             }
             const receipt = await controller.stepToOffset(visibleStart, stage.offsetMs)
-            await releaseHoldIfDue(receipt)
+            await advanceHold(receipt)
             snapshots.push({
               actualMs: receipt.virtualTimestampMs - visibleStart.virtualTimestampMs,
               bitmap: await captureBitmap(),

package/dist-lib/agent-daemon-client.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.518 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __create = Object.create;

package/dist-lib/agent-events.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.518 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __defProp = Object.defineProperty;

package/dist-lib/agent-identity.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.518 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __defProp = Object.defineProperty;

package/dist-lib/agent-sessions.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.518 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __create = Object.create;

package/dist-lib/attached-projects.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.518 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __create = Object.create;

package/dist-lib/auth/shared-session.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.518 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __create = Object.create;

package/dist-lib/backend-origin.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.518 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __defProp = Object.defineProperty;

package/dist-lib/beta.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.518 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __defProp = Object.defineProperty;

package/dist-lib/beta.mjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.518 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 
 // src/beta.ts
 var IS_BETA = true;

package/dist-lib/bridge-constants.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.518 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __defProp = Object.defineProperty;

package/dist-lib/bridge-contract-input.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.518 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __defProp = Object.defineProperty;

package/dist-lib/bridge-contract-input.mjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.518 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 
 // src/bridge-contract.ts
 var SIM_LONG_PRESS_MAX_MS = 5e3;

package/dist-lib/bridge-contract.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.518 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __defProp = Object.defineProperty;

package/dist-lib/bridge-contract.mjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.518 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 
 // src/bridge-contract.ts
 var REFUSED_PERFORM_STEP_TYPES = [

package/dist-lib/capture-contract.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.518 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __defProp = Object.defineProperty;

package/dist-lib/capture-contract.mjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.518 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 
 // src/capture-contract.ts
 var RNX_SCREEN_CAPTURE_VERSION = 1;

package/dist-lib/cli-constants.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.518 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __defProp = Object.defineProperty;

package/dist-lib/cloud-contract.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.518 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __defProp = Object.defineProperty;
@@ -30,9 +30,15 @@ __export(cloud_contract_exports, {
   RNX_CLOUD_LABELS_MAX_COUNT: () => RNX_CLOUD_LABELS_MAX_COUNT,
   RNX_CLOUD_LABEL_MAX_LENGTH: () => RNX_CLOUD_LABEL_MAX_LENGTH,
   RNX_CLOUD_MAX_ARTIFACT_BYTES: () => RNX_CLOUD_MAX_ARTIFACT_BYTES,
+  RNX_CLOUD_SCOPED_TOKEN_DEFAULT_TTL_SECONDS: () => RNX_CLOUD_SCOPED_TOKEN_DEFAULT_TTL_SECONDS,
+  RNX_CLOUD_SCOPED_TOKEN_MAX_ORIGINS: () => RNX_CLOUD_SCOPED_TOKEN_MAX_ORIGINS,
+  RNX_CLOUD_SCOPED_TOKEN_MAX_TTL_SECONDS: () => RNX_CLOUD_SCOPED_TOKEN_MAX_TTL_SECONDS,
+  RNX_CLOUD_SCOPED_TOKEN_MIN_TTL_SECONDS: () => RNX_CLOUD_SCOPED_TOKEN_MIN_TTL_SECONDS,
+  RNX_CLOUD_SCOPED_TOKEN_PREFIX: () => RNX_CLOUD_SCOPED_TOKEN_PREFIX,
   RNX_CLOUD_TEST_FILES_MAX_BYTES: () => RNX_CLOUD_TEST_FILES_MAX_BYTES,
   RNX_CLOUD_TEST_FILES_MAX_COUNT: () => RNX_CLOUD_TEST_FILES_MAX_COUNT,
   RNX_CLOUD_TOKEN_SCOPES: () => RNX_CLOUD_TOKEN_SCOPES,
+  isRnxCloudCommandScope: () => isRnxCloudCommandScope,
   isRnxCloudCommandType: () => isRnxCloudCommandType,
   isRnxCloudSimStatus: () => isRnxCloudSimStatus,
   isValidRnxCloudLabel: () => isValidRnxCloudLabel,
@@ -48,6 +54,22 @@ var RNX_CLOUD_DESIGN_MAX_STORAGE_ENTRIES = 256;
 var RNX_CLOUD_DESIGN_MAX_STORAGE_BYTES = 1024 * 1024;
 var RNX_CLOUD_TEST_FILES_MAX_COUNT = 256;
 var RNX_CLOUD_TEST_FILES_MAX_BYTES = 5e5;
+var RNX_CLOUD_COMMAND_SCOPE_SET = /* @__PURE__ */ new Set([
+  "read",
+  "drive",
+  "reset",
+  "media",
+  "debug",
+  "watch"
+]);
+function isRnxCloudCommandScope(value) {
+  return RNX_CLOUD_COMMAND_SCOPE_SET.has(value);
+}
+var RNX_CLOUD_SCOPED_TOKEN_PREFIX = "sk_rnx_sim_";
+var RNX_CLOUD_SCOPED_TOKEN_DEFAULT_TTL_SECONDS = 3600;
+var RNX_CLOUD_SCOPED_TOKEN_MIN_TTL_SECONDS = 1;
+var RNX_CLOUD_SCOPED_TOKEN_MAX_TTL_SECONDS = 14400;
+var RNX_CLOUD_SCOPED_TOKEN_MAX_ORIGINS = 16;
 var RNX_CLOUD_COMMAND_SCOPES = {
   state: "read",
   tree: "read",
@@ -152,9 +174,15 @@ function isRnxCloudSimStatus(value) {
   RNX_CLOUD_LABELS_MAX_COUNT,
   RNX_CLOUD_LABEL_MAX_LENGTH,
   RNX_CLOUD_MAX_ARTIFACT_BYTES,
+  RNX_CLOUD_SCOPED_TOKEN_DEFAULT_TTL_SECONDS,
+  RNX_CLOUD_SCOPED_TOKEN_MAX_ORIGINS,
+  RNX_CLOUD_SCOPED_TOKEN_MAX_TTL_SECONDS,
+  RNX_CLOUD_SCOPED_TOKEN_MIN_TTL_SECONDS,
+  RNX_CLOUD_SCOPED_TOKEN_PREFIX,
   RNX_CLOUD_TEST_FILES_MAX_BYTES,
   RNX_CLOUD_TEST_FILES_MAX_COUNT,
   RNX_CLOUD_TOKEN_SCOPES,
+  isRnxCloudCommandScope,
   isRnxCloudCommandType,
   isRnxCloudSimStatus,
   isValidRnxCloudLabel,

package/dist-lib/cloud-contract.mjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.518 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 
 // src/cloud-contract.ts
 var RNX_CLOUD_MAX_ARTIFACT_BYTES = 20 * 1024 * 1024;
@@ -6,6 +6,22 @@ var RNX_CLOUD_DESIGN_MAX_STORAGE_ENTRIES = 256;
 var RNX_CLOUD_DESIGN_MAX_STORAGE_BYTES = 1024 * 1024;
 var RNX_CLOUD_TEST_FILES_MAX_COUNT = 256;
 var RNX_CLOUD_TEST_FILES_MAX_BYTES = 5e5;
+var RNX_CLOUD_COMMAND_SCOPE_SET = /* @__PURE__ */ new Set([
+  "read",
+  "drive",
+  "reset",
+  "media",
+  "debug",
+  "watch"
+]);
+function isRnxCloudCommandScope(value) {
+  return RNX_CLOUD_COMMAND_SCOPE_SET.has(value);
+}
+var RNX_CLOUD_SCOPED_TOKEN_PREFIX = "sk_rnx_sim_";
+var RNX_CLOUD_SCOPED_TOKEN_DEFAULT_TTL_SECONDS = 3600;
+var RNX_CLOUD_SCOPED_TOKEN_MIN_TTL_SECONDS = 1;
+var RNX_CLOUD_SCOPED_TOKEN_MAX_TTL_SECONDS = 14400;
+var RNX_CLOUD_SCOPED_TOKEN_MAX_ORIGINS = 16;
 var RNX_CLOUD_COMMAND_SCOPES = {
   state: "read",
   tree: "read",
@@ -109,9 +125,15 @@ export {
   RNX_CLOUD_LABELS_MAX_COUNT,
   RNX_CLOUD_LABEL_MAX_LENGTH,
   RNX_CLOUD_MAX_ARTIFACT_BYTES,
+  RNX_CLOUD_SCOPED_TOKEN_DEFAULT_TTL_SECONDS,
+  RNX_CLOUD_SCOPED_TOKEN_MAX_ORIGINS,
+  RNX_CLOUD_SCOPED_TOKEN_MAX_TTL_SECONDS,
+  RNX_CLOUD_SCOPED_TOKEN_MIN_TTL_SECONDS,
+  RNX_CLOUD_SCOPED_TOKEN_PREFIX,
   RNX_CLOUD_TEST_FILES_MAX_BYTES,
   RNX_CLOUD_TEST_FILES_MAX_COUNT,
   RNX_CLOUD_TOKEN_SCOPES,
+  isRnxCloudCommandScope,
   isRnxCloudCommandType,
   isRnxCloudSimStatus,
   isValidRnxCloudLabel,

package/dist-lib/cloud.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.518 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __defProp = Object.defineProperty;
@@ -24,8 +24,11 @@ var cloud_exports = {};
 __export(cloud_exports, {
   RNX_CLOUD_COMMAND_TYPES: () => RNX_CLOUD_COMMAND_TYPES,
   RNX_CLOUD_MAX_ARTIFACT_BYTES: () => RNX_CLOUD_MAX_ARTIFACT_BYTES,
+  RNX_CLOUD_SCOPED_TOKEN_PREFIX: () => RNX_CLOUD_SCOPED_TOKEN_PREFIX,
   RemoteSimulator: () => RemoteSimulator,
+  connect: () => connect,
   createRemoteSimulator: () => createRemoteSimulator,
+  isRnxCloudCommandScope: () => isRnxCloudCommandScope,
   isRnxCloudCommandType: () => isRnxCloudCommandType
 });
 module.exports = __toCommonJS(cloud_exports);
@@ -99,6 +102,18 @@ function isRnxScreenCapture(value) {
 // src/cloud-contract.ts
 var RNX_CLOUD_MAX_ARTIFACT_BYTES = 20 * 1024 * 1024;
 var RNX_CLOUD_DESIGN_MAX_STORAGE_BYTES = 1024 * 1024;
+var RNX_CLOUD_COMMAND_SCOPE_SET = /* @__PURE__ */ new Set([
+  "read",
+  "drive",
+  "reset",
+  "media",
+  "debug",
+  "watch"
+]);
+function isRnxCloudCommandScope(value) {
+  return RNX_CLOUD_COMMAND_SCOPE_SET.has(value);
+}
+var RNX_CLOUD_SCOPED_TOKEN_PREFIX = "sk_rnx_sim_";
 var RNX_CLOUD_COMMAND_SCOPES = {
   state: "read",
   tree: "read",
@@ -336,7 +351,7 @@ function readBoxCreate(value, expectedBytes, expectedSha256) {
     simulatorToken: simulator.token
   };
 }
-function cloudCommand(command) {
+function cloudCommand(command, scopes) {
   const clean = {};
   for (const [key, value] of Object.entries(command)) {
     if (key !== "id" && key !== "simId") clean[key] = value;
@@ -344,7 +359,7 @@ function cloudCommand(command) {
   if (!isRnxCloudCommandType(command.type)) {
     throw new Error(`RNX Cloud does not support bridge command type ${command.type}`);
   }
-  if (!rnxCloudScopesAllowCommand(RNX_CLOUD_TOKEN_SCOPES, command.type)) {
+  if (!rnxCloudScopesAllowCommand(scopes, command.type)) {
     throw new Error(
       `RNX Cloud command ${command.type} requires the ${rnxCloudCommandScope(command.type)} scope`
     );
@@ -391,7 +406,10 @@ var RemoteSimulator = class {
         }
         return result;
       },
-      reset: () => this.sendCommand({ type: "reset" })
+      reset: () => this.sendCommand({ type: "reset" }),
+      state: (options) => this.sendCommand(
+        options === void 0 ? { type: "state" } : { type: "state", stateOptions: options }
+      )
     };
   }
   get simId() {
@@ -400,7 +418,13 @@ var RemoteSimulator = class {
   get claim() {
     return this.session.claim;
   }
+  get scopes() {
+    return this.session.scopes;
+  }
   get receipt() {
+    if (!this.session.claim) {
+      throw new Error("this simulator was attached with connect() and holds no claim");
+    }
     return {
       simId: this.session.simId,
       artifact: this.session.artifact,
@@ -410,8 +434,10 @@ var RemoteSimulator = class {
   async sendCommand(command, options) {
     const body = {
       id: globalThis.crypto.randomUUID(),
-      claimId: this.session.claim.id,
-      command: cloudCommand(command)
+      // a scoped token drives without a claim: the service checks the token
+      // instead. a full token still joins the claim it names here.
+      claimId: this.session.claim?.id ?? "",
+      command: cloudCommand(command, this.session.scopes)
     };
     let response;
     try {
@@ -450,6 +476,10 @@ var RemoteSimulator = class {
     return parsed.result;
   }
   async confirm() {
+    if (!this.session.claim) {
+      throw new Error("this simulator was attached with connect() and holds no claim");
+    }
+    const claimId = this.session.claim.id;
     const response = await fetchWithCloudRetry(
       `${this.session.origin}/v1/sims/${encodeURIComponent(this.session.simId)}/claim`,
       {
@@ -458,7 +488,7 @@ var RemoteSimulator = class {
           authorization: `Bearer ${this.session.simulatorToken}`,
           "content-type": "application/json"
         },
-        body: JSON.stringify({ claimId: this.session.claim.id })
+        body: JSON.stringify({ claimId })
       }
     );
     const text = await response.text();
@@ -470,20 +500,24 @@ var RemoteSimulator = class {
       throw new Error("RNX Cloud claim returned unreadable JSON");
     }
     const claim = readClaim(isRecord(parsed) ? parsed.claim : null);
-    if (claim.id !== this.session.claim.id) {
+    if (claim.id !== claimId) {
       throw new Error("RNX Cloud confirmation replaced the initial claim");
     }
     this.session = { ...this.session, claim };
     return claim;
   }
   async close() {
-    const response = await fetchWithCloudRetry(
-      `${this.session.origin}/v1/boxes/${encodeURIComponent(this.session.boxId)}`,
-      {
-        method: "DELETE",
-        headers: { authorization: `Bearer ${this.session.boxToken}` }
-      }
-    );
+    const target = this.session.boxId !== null && this.session.boxToken !== null ? {
+      url: `${this.session.origin}/v1/boxes/${encodeURIComponent(this.session.boxId)}`,
+      authorization: `Bearer ${this.session.boxToken}`
+    } : {
+      url: `${this.session.origin}/v1/sims/${encodeURIComponent(this.session.simId)}`,
+      authorization: `Bearer ${this.session.simulatorToken}`
+    };
+    const response = await fetchWithCloudRetry(target.url, {
+      method: "DELETE",
+      headers: { authorization: target.authorization }
+    });
     const text = await response.text();
     if (!response.ok && response.status !== 404) {
       throw responseError(response.status, text);
@@ -541,16 +575,80 @@ async function createRemoteSimulator(input) {
     simId: created.receipt.simulator.simId,
     simulatorToken: created.simulatorToken,
     claim: created.receipt.simulator.claim,
-    artifact: created.receipt.artifact
+    artifact: created.receipt.artifact,
+    scopes: RNX_CLOUD_TOKEN_SCOPES
   });
   await simulator.confirm();
   return simulator;
 }
+function readSimArtifact(value) {
+  if (!isRecord(value) || typeof value.sha256 !== "string" || !/^[a-f0-9]{64}$/.test(value.sha256) || typeof value.bytes !== "number" || !Number.isInteger(value.bytes) || value.bytes <= 0) {
+    throw new Error("RNX Cloud returned an invalid simulator artifact");
+  }
+  return { id: `sha256:${value.sha256}`, bytes: value.bytes };
+}
+function readConnectClaim(value) {
+  if (value === null) return null;
+  return readClaim(value);
+}
+function readConnectScopes(value, token) {
+  if (!token.startsWith(RNX_CLOUD_SCOPED_TOKEN_PREFIX)) return RNX_CLOUD_TOKEN_SCOPES;
+  if (!isRecord(value) || typeof value.id !== "string" || !value.id || !Array.isArray(value.scopes) || value.scopes.length === 0 || !value.scopes.every(
+    (scope) => typeof scope === "string" && isRnxCloudCommandScope(scope)
+  ) || typeof value.expiresAt !== "number") {
+    throw new Error("RNX Cloud returned an invalid scoped token");
+  }
+  return Object.freeze([...value.scopes]);
+}
+async function connect(input) {
+  if (!input.id) throw new Error("RNX Cloud connect needs a simulator id");
+  if (!input.token) throw new Error("RNX Cloud connect needs a token");
+  const origin = resolveOrigin(input.origin);
+  let response;
+  try {
+    response = await fetchWithCloudRetry(
+      `${origin}/v1/sims/${encodeURIComponent(input.id)}`,
+      { headers: { authorization: `Bearer ${input.token}` } }
+    );
+  } catch (error) {
+    throw new Error(
+      `could not reach RNX Cloud at ${origin}: ${error instanceof Error ? error.message : String(error)}`
+    );
+  }
+  const text = await response.text();
+  if (!response.ok) throw responseError(response.status, text);
+  let parsed;
+  try {
+    parsed = JSON.parse(text);
+  } catch {
+    throw new Error("RNX Cloud connect returned unreadable JSON");
+  }
+  if (!isRecord(parsed) || !isRecord(parsed.sim)) {
+    throw new Error("RNX Cloud connect returned an invalid simulator");
+  }
+  const sim = parsed.sim;
+  if (typeof sim.simId !== "string" || !sim.simId) {
+    throw new Error("RNX Cloud connect returned an invalid simulator");
+  }
+  return new RemoteSimulator({
+    origin,
+    boxId: null,
+    boxToken: null,
+    simId: sim.simId,
+    simulatorToken: input.token,
+    claim: readConnectClaim(sim.claim ?? null),
+    artifact: readSimArtifact(sim.artifact),
+    scopes: readConnectScopes(isRecord(parsed) ? parsed.token : null, input.token)
+  });
+}
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   RNX_CLOUD_COMMAND_TYPES,
   RNX_CLOUD_MAX_ARTIFACT_BYTES,
+  RNX_CLOUD_SCOPED_TOKEN_PREFIX,
   RemoteSimulator,
+  connect,
   createRemoteSimulator,
+  isRnxCloudCommandScope,
   isRnxCloudCommandType
 });